ipsec Mikrotik PFsense

RouterOS General
1

Hello Guys,

I have an issue with ipsec .

I have configured ipsec between PFsense and Mikrotik and everything is working fine.
However after 10 mins when ipsec connection disappears from firewal–>connections I cannot ping from Pfsense network to Mikrotik network. For this to resolve I have to ping from Mikrtoik Network to PFsense network first or disable mikrtiks firewall and once I do that I can ping from PFsense network again.

Also I cannot Ping from the mirktoik router itself to PFsense network, but devices behind mikrotik can ping just fine

Any help please.
thank you.

2

an update.
looks like the timer on both end was not matching, once changed and clear connections or waited for connection to expire, was still able to ping from pfsense network, looks like the important part is resolved.
I will give it time and test it again. will do an update here

however can someone please advise on how to resolve the issue with pinging from mikrotik ? to Pfsense network as it is still an issue here.

thank you

3

Hi,

When you ping from mikrotik itself, indicate in the source an IP address that matches the ipsec policies.

Example:
Mikrotik: 192.168.1.1/24
Pfsense: 192.168.2.1/24

Routeros> ping 192.168.2.1 src-address=192.168.1.1

Regards,

4

Hey Thank you for the reply.
Yeh that is what I do, pinging with source Ip address of the mirktoik lan (mikrotik gateway), still Timeout.

5

Hi,

Paste the command output:

 /ip firewall export hide-sensitive

Regards,